Skip to main content
AVOID.NET

ForceBridge

avoid.net/forcebridge20/100·82% conf.
[AI-DRAFTED · AWAITING VERIFICATION][src:defillama]

Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.

anchored·5GGq22…9Cvy

Summary

ForceBridge is a cross-chain bridge operated by Magickbase on the Nervos Network (CKB), enabling transfers between Nervos and Ethereum and BNB Chain. On June 2, 2025, the bridge was exploited via an access control vulnerability — likely a compromised private key — resulting in approximately $3.7–3.9 million in user funds being stolen and laundered through Tornado Cash. The exploit occurred just one day after Magickbase announced the bridge's sunset, raising questions about the timing and origin of the attack.

Connected Entities

7 entities · 60 linked investigations
Organizations
ForceBridgeEthereum64PolkadotBinanceCardanoZachXBT
Protocols
Relationships
  • ZachXBTmentioned withEthereum(70%)
  • ZachXBTmentioned withBinance(60%)
  • Binancementioned withEthereum(65%)
  • ForceBridgementioned withPolkadot(60%)
  • ForceBridgementioned withCardano(60%)
  • ForceBridgementioned withEthereum(70%)
  • ForceBridgementioned withBinance(60%)
  • ForceBridgementioned withFixedFloat(70%)
  • ForceBridgementioned withZachXBT(60%)
  • Polkadotmentioned withEthereum(65%)
  • + 4 more
Have evidence about ForceBridge?

Timeline(8 events)

14 October 2021

ForceBridge launches on Nervos Network mainnet, enabling cross-chain transfers between CKB, Ethereum, Cardano, and Polkadot.

31 May 2025

Magickbase announces the sunset of ForceBridge and Godwoken, citing low user activity and high maintenance costs. Six-month withdrawal window announced.

2 June 2025

ForceBridge exploited via access control vulnerability (likely compromised private key). Approximately $3.7–3.9 million in ETH, USDC, USDT, DAI, and WBTC stolen across Ethereum and BNB Chain.

2 June 2025

Cyvers Alerts first detects and reports suspicious activity involving ForceBridge on X.

2 June 2025

Magickbase pauses all ForceBridge bridge contracts and announces investigation. Stolen funds are laundered through Tornado Cash and FixedFloat.

2 June 2025

Magickbase publicly discloses $3.7 million in affected funds and announces cooperation with law enforcement and partner exchanges.

2 June 2025

Halborn Security publishes technical post-mortem attributing hack to access control failure, noting suspicious timing relative to sunset announcement.

16 January 2026

Extended deadline for user withdrawals from Force Bridge. Remaining funds to be held in Magickbase custody.

Provenance & Audit Trail

Decision Log

This investigation is cryptographically anchored to the Solana blockchain (1 event). 14 of 15 cited source URLs have an Internet Archive snapshot.

model: claude-sonnet-4-6

generated: 5/4/2026, 2:54:23 AM

last updated: 9/1/2026, 3:39:49 AM

6 views

avoid.net — verified advice for a post-truth world